CISA Certification Training (Certified Information Systems Auditor)

• This CISA training is for IS/IT auditors, IT compliance managers, chief audit executives, chief security and privacy officers, security heads and other security leaders.

Learning objective: To receive your CISA certification, you need five years of professional experience in IS/IT audit, control, assurance or security. Some education and other certifications can substitute for up to three years. The experience must be gained within the 10 years before your application or within five years after you pass the exam, and you must apply within five years of passing.

Learning objective: Learning goal: Learn to provide audit services that follow IS audit standards, so organizations can protect and control their information systems. This domain covers your ability to report on an organization's IS/IT security, risk and control practices.

• Business processes
• IS audit standards, guidelines and code of ethics
• Types of audits and assessments
• Risk-based audit planning
• Types of controls
• Audit project management
• Sampling methodology
• Audit evidence collection techniques
• Data analytics
• Reporting and communication techniques

Learning objective: Learning goal: Learn how to identify critical issues and recommend enterprise-specific practices to support and safeguard the governance of information and related technology.

• IT governance and IT strategy
• IT-related frameworks
• IT standards, policies and procedures
• Organizational structure
• Enterprise architecture
• Enterprise risk management
• Maturity models
• Laws, regulations and industry standards affecting the organization
• IT resource management
• IT service provider acquisition and management
• IT performance monitoring and reporting
• Quality assurance and quality management of IT

• Learning goal: Learn how organizations acquire, develop, test and implement information systems, and how to audit each stage.
• Project governance and management
• Business case and feasibility analysis
• System development methodologies
• Control identification and design
• Testing methodologies
• Configuration and release management
• System migration, infrastructure deployment and data conversion
• Post-implementation review

• Learning goal: Learn how IT operations support the business and how to keep the organization resilient.
• Common technology components
• IT asset management
• Job scheduling and production process automation
• System interfaces
• End-user computing
• Data governance
• Systems performance management
• Problem and incident management
• Change, configuration, release and patch management
• IT service level management
• Database management
• Business impact analysis
• System and operational resilience
• Data backup, storage and restoration
• Business continuity and disaster recovery plans

Learning objective: Learning goal: Cybersecurity now touches almost every part of an information system. Learn the principles, best practices and common pitfalls of protecting information assets.

• Information asset security frameworks, standards and guidelines
• Privacy principles
• Physical and environmental access controls
• Identity and access management
• Network and endpoint security
• Data classification
• Data encryption and encryption-related techniques
• Public key infrastructure (PKI)
• Web-based communication techniques
• Virtualized environments
• Mobile, wireless and Internet of Things (IoT) devices
• Security awareness training and programs
• Information system attack methods and techniques
• Security testing tools and techniques
• Security monitoring tools and techniques
• Incident response management
• Evidence collection and forensics